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We provide decidability and undecidability results on the model-checking problem for infinite tree 
structures. These tree structures are built from sequences of elements of infinite relational structures. 
More precisely, we deal with the tree iteration of a relational structure ./# in the sense of Shelah- 
Stupp. In contrast to classical results, where model-checking is shown decidable for MSO-logic, 
we show decidability of the tree model-checking problem for logics that allow only path quantifiers 
and chain quantifiers (where chains are subsets of paths), as they appear in branching time logics; 
however, at the same time, the tree is enriched by the equal-level relation (which holds between 
vertices u, v if they are on the same tree level). We separate cleanly the tree logic from the logic used 
for expressing properties of the underlying structure j$ . We illustrate the scope of the decidability 
results by showing that two slight extensions of the framework lead to undecidability. In particular, 
this applies to the (stronger) tree iteration in the sense of Muchnik-Walukiewicz. 

1 Introduction 

A key result in the field of "infinite-state model-checking" is Rabin's Tree Theorem ifTUl . It says that 
the monadic second-order theory (short: MSO-theory) of the binary tree is decidable. Many decidability 
results on theories of infinite structures have been obtained by a reduction to Rabin's Tree Theorem. It 
is also well-known that a slight extension of the signature of the binary tree leads to undecidability: The 
expansion of the binary tree by the "equal-level relation" E has an undecidable monadic theory. 

The situation changes when set quantification is restricted to "chains", i.e., sets that are linearly or- 
dered by the partial tree ordering. It is known ( lfl6l ) that for the unlabeled binary tree and also for any 
regular binary tree, the chain logic theory of the tree is decidable in the presence of E. This result is of 
interest in verification since a large number of logical concepts that occur in specifications of nontermi- 
nating systems refer to computation paths and their subsets (i.e., to chains), for example in branching 
time logics. The second-order quantifiers in these applications do not refer to global colorings of com- 
putation trees (for which monadic logic would be invoked) but rather to quantification over chains. The 
equal-level relation adds the feature of synchronization to computation paths. 

In recent years, a theory of words and trees over infinite alphabets emerged (JU |2] |4l) that opens 
a way for generalizations. Here, a computation path is a sequence of letters chosen from a relational 
structure ^# = (M,R\,. . . ,Rk), which is infinite in general, rather than from a finite alphabet £. Instead 
of the binary tree obtained from the words of {0, 1}* built from the two element alphabet {0, 1}, the 
infinitely branching infinite tree with vertices in M* is considered. 

There are two fundamental constructions of a tree structure built from an "alphabet structure" 
called "weak", respectively "strong" tree iteration of jtf, and denoted here M*, respectively ^M* . For 
^ = (M,Ri,.. . ,Rk), let 

J? # = (M\<,S,R\,...X k ) 



F. Yu and C. Wang: The 13th International Workshop on 
Verification of Infinite State Systems (INFINITY' 1 1) 
EPTCS 73, 201 1, pp. 204341 doi: 10.4204/E PTCS.73.5I 



© A. Spelten, W. Thomas & S. Winter 
This work is licensed under the 
Creative Commons Attribution License. 



A. Spelten, W. Thomas & S. Winter 



21 



where S(u,v) holds if v = um for some u G M*,m € M, ^ is the reflexive transitive closure of 5, and, for 
^-ary we have R*(y\,. ..,V£) iff for some z € Af , Vj = zmj for j = !,...,£ such that Ri(m\, . . . ,ni() 
holds in This iteration is also called Shelah-Stupp iteration, going back to Ifl3lfl4ll . 

The strong tree iteration is obtained from the weak one by adjoining the "clone predicate" 

C = {umm\ue M*,m G M} 

to the signature. It allows to connect two levels of the tree structure in a way that "unfolding" becomes 
definable. 

As shown by Shelah and Stupp |fT3l[T4ll . respectively Muchnik and Walukiewicz (see the announce- 
ment in 021 and the proof in (HI), the MSO-theory of J{* and the MSO-theory of Jt* are decidable 
if the MSO-theory of ^# is. In the present paper we show the decidability of the chain logic theory of 
structures jtfg, obtained by adjoining the equal level relation E to under mild assumptions on the 
structure ^ . Our results extend work of Kuske and Lohrey [6] on structures and of Bes |£TJ on 
structures Furthermore, we show - in contrast to the Muchnik- Walukiewicz result for MSO-logic 
- that a transfer of this decidability result to tree structures is not possible. 

Bes shows the decidability of the chain logic theory of jft^ if the first-order theory of M is decidable. 
Here we refine his result: We refer to any logic Jzf such that the Jzf-theory of jtft is decidable, and we 
consider an extension of the chain theory of in which further quantifications are allowed, namely 
quantifiers of Jzf restricted to the set of siblings of any element z. (Thus one allows quantifiers over 
elements y that are 5-successors of any given element z.) We call the corresponding theory the chain 
logic theory of with Jzf on siblings. We show that this theory is decidable if the Jz^-theory of is. 

In our framework two logics play together: The logic Jzf allows to express relations between 
elements as they appear as sons of some given node of the tree, and chain logic is used to speak about 
(sets of) tree elements arranged along paths. Referring to the standard graphical representation of trees, 
Jzf captures the horizontal dimension and chain logic the vertical dimension. On the level of signatures, 
the predicate E of the tree signature refers to the horizontal while the successor and the prefix relation 
refer to the vertical aspect; finally, the signature of enters in the horizontal dimension, restricted to 
the children of a tree node. 

Standard examples of logics Jzf are first-order logic FO, monadic second-order logic MSO and 
its weak fragment WMSO, transitive closure logic TC, or extensions of FO by counting operators. 
(In this paper we do not present a precise definition of the concept of a "logic" and just refer the 
reader to [5].) Standard examples of models ^# originate in arithmetic and analysis, e.g. (N, +,< 
,0), (R,+, <,0, 1), (R, +, •, <,0, 1) (whose first-order theory is decidable). In applications, one may 
work with structures j$ that are direct products of finite transition graphs with infinite value structures 
such as (R,+,<,0,1) or the real field (R, +,-,<, 0,1). 

The method to show the main result rests on a simple observation, first exploited in [16]: Consider 
the tree with domain M* where M is ordered of order type ft). A formula (f>{X\,. . . ,X n ) of chain logic - 
with chains c,- as possible interpretations of the X,- - can be viewed as a statement about 2«-tuples of co- 
words as follows. Any single chain c, is encoded by two ft)- words; the first is from M m and describes the 
(leftmost) full path of which c ( is a subset. The second is a 0-1 -sequence describing by its entries and 
1 which elements of the path belong to c,-. Now the obtained 2«-tuple of ft)- words over M, respectively 
{0, 1}, can be viewed as a single ft)-word with alphabet letters from (M x {0, 1})". Using this translation 
of n-tuples of chains of ^* into ft)-words over (M x {0, 1})", we obtain a translation of chain logic 
formulas into MSO-formulas interpreted in ft)-words, i.e., structures with domain N. More precisely, 
when Jzf is the logic used for we obtain a formula of "^-Jzf-MSO". 
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This framework of ^#-Jzf-MSO is in turn equivalent to Biichi automata (over co-words with entries 
from (M x {0,1})"). We develop these ^#-«5f -Biichi automata as a preparation for the main result. 
It turns out that these automata allow closure and decidability results in precise analogy to the classical 
theory over finite alphabets. As a consequence we obtain that the chain theory of with Jzf on siblings 
is decidable if the Jzf-fheory of ^# is. 

While the setting of ./#-Jzf -Biichi automata is sufficient for the study of tree models it has to 
be extended to cope with strong tree iterations where the clone predicate enters. We define "strong 
^-Jzf -Biichi automata" for this purpose. Here a remarkable difference occurs between the cases of an 
input alphabet M (with infinite M) and an input alphabet M" for n > 1 . We give a brief explanation that in 
the first case strong Biichi automata behave as ^-^£ -Biichi automata (however using just Jzf = MSO), 
whereas in the second case of input alphabets M n with n > 1, undecidability phenomena enter (in the 
form that the emptiness problem becomes undecidable). Along this line we show that the chain theory 
(and even the first-order theory) of is undecidable if <Ji is infinite - in fact already for the case that 
j$ is the successor structure of the natural numbers. 

A last result of the paper shows that the decidability result (on the chain theory of with Jzf on 
siblings) also fails when quantification extends over an entire tree level rather than just siblings of a fixed 
node. We obtain this for the weak tree iteration of the two element alphabet {0, 1} when the logic Jzf is 
MSO. 

The paper is structured as follows. In the subsequent section we collect the necessary terminology. 
Section[3]develops the theory of Biichi automata over co-words whose letters are ^-tuples from an infinite 
structure j$ and using a logic Jzf to specify properties of such letters in In Section @] we deduce 
the decidability of the chain theory of with Jzf on siblings when the Jzf-theory of ^ is decidable. 
Section [5] gives the two mentioned undecidability results. We conclude with remarks on further work. 

2 Terminology 

We consider relational structures with finite signature. Such a structure is presented in the format ^# = 
(M,R\, . . . ,Rk) where /?, is of arity r,- > 0. We focus on structures called "admissible": In this case there 
are two designated elements (usually called and 1), represented by two singleton predicates Po,P\ that 
belong to the tuple , . . . Then we can view bit sequences as special sequences over ^ . 

For an co-word a£l ffl (where £ may be infinite), written a = a(0)a(l) . . ., we denote by tt[i,j] the 
segment a(i) ...a(j). 

We introduce two tree models built from a relational structure The first is the weak tree iteration 

Jt* = (M\<,S,R\,...,R\) 

where u < v u is a prefix of v, S is the successor relation containing all pairs (u,um) with u € M* , m 6 
M, and for every /?,-, say of arity £, we have R*(v\ , . . . , vg) iff there exists z € M*, m\,. . .mi £ M such that 
vj = zrrij for 7 = 1,... mi and Ri{m\ , . . . , mf). (In 0]] a variant of this definition is used, namely that there 
exist zi,-..,Zi £ M* of same length and mi,..., mi € M such vj = Zjtrij with Ri{m\ , . . . , mi).) 
As mentioned in the introduction, the strong tree iteration of ^ is the structure 

^* = {M*,<,S,R\,...,Rt,C) 

where everything is as above for and C = {umm\u€ M*,m £ M}. The expansions of ^# # , 
by the equal level relation E (with E(u, v) iff \u\ = |v|) are denoted respectively. 
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If ^ is finite, we assume that each individual letter of M is definable. The usual approach is to 
introduce a constant in the signature of for each element of M. In the present paper we stick to 
relational structures and use a singleton predicate R m for each element m G M. So the binary alphabet 
{0, 1} is coded by the structure = ({0, \},Ro,R\) with Ro = {0}, Ri = {1}. In the case of finite 
structures there is no essential difference between and Jt* , since the clone predicate C becomes 
definable in ^* by the equivalence 

C(v)*+ \/ (MK(u)^S(u,v)AR* m (v)). 

meM 

Let us introduce chain logic over the tree structures and built from ^C. A path (through 
the tree domain M*) is a maximal set linearly ordered by ■<; it may be identified with an co-word in 
M®, obtained as the common extension of all the words u G M* forming the path. A chain is a subset 
of a path. So a singleton set in M* is a chain, and we can easily simulate first-order quantification by 
quantification over chains restricted to singletons. We call chain logic the fragment of MSO logic in 
which set quantification is restricted to chains. 

Sometimes it is convenient to eliminate first-order variables and quantifiers in terms of (singleton) 
chain quantifiers. This simplifies the setting since only one kind X\,X2, ... of variables remains, ranging 
over chains. In order to simulate first-order logic, the signature of tree models has to be adapted. As 
atomic formulas one uses 

• Sing(Z) for "X is a singleton" 

• Xj C Xj with its standard meaning, 

• Succ(Xi,Xj) for "Xi is a singleton {x,}, Xj is a singleton {xj}, with S(xi,xj); similarly for Xj ^ Xj. 

The resulting formalism is called chaino logic; it has the same expressive power as chain logic. 

For an admissible alphabet M (containing two identifiable elements 0,1) we encode a chain c as a 
pair c := (a,j8) G (M m ) 2 where 

• a encodes the path of which c is a subset. As c can be finite, we set a to be the path mo... m r 000 . . . 
where m r is the last c-element of which c is a subset; it can be interpreted as a sequence of "direc- 
tions". Note that for each element w in c it holds that w is a prefix of a. 

• j3 codes membership in c along the path a, i.e., /3(z) = 1 iff a[0,i] G c. 

So if c = 0, a is the path ffl through the tree M* and j3 also is the sequence that is constant 0. 
The technical treatment below is simplified when viewing an ra-tuple (ai , . . . , a n ) of w- words over 
M as a single 60-word over M n , the convolution of (a\ , . . . , a n )\ 





"«i(0)" 




«i(l)" 




(Ofl,..., On) : = 








... £ (M n ) m 




_a n (0)_ 




_a„(l)_ 




Similarly, we define the convolution of a relation R C (M m ) n 


of co-words to be the co-language 


Lr := {{ai, 


...,a n ) | 




,OCn)eR}. 



So the ra-tuples of M-elements just considered will be used as letters of co-words and input letters 
of Biichi automata. Transitions of automata will be specified in a logic Jzf by means of Jzf -formulas 
<p(x\ , . . . ,x n ). Each of these formulas defines a unary predicate <jp"^ over M": 

(p * = {(mi,...,m„) GM" I \= (p[m u ...,m n }} 
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In general we consider co-models over M" for a signature that is given by a finite set <I> of Jzf- 
formulas: Given a tuple (ai,...,a n ) of words over an alphabet M and a finite set <I> of .if -formulas 
<pi , . . . , <Pfc with n free variables each, we define the structure 

(a 1 ,...,a n ) = (N,0,<,5, (Pq>)<p € <s>) 

with the usual interpretations of 0, <,S (the latter for the successor relation), and the letter predicates 
P(pj = {/ G N | (CC\ (/),..., CCn(i)) G <p~f}- Thus, Pq, collects all letter positions of (cc\ , . . . , a n ) which carry 
a letter from M" that shares the property described by (p. 

For these co-models over equipped with predicates P v defined in jSf , we shall use a generalized 
form of MSO-logic, where - as usual in co-language theory - the first-order quantifiers range over N and 
the monadic second-order quantifiers over sequences of letters (here from M). The system will be called 
^-Jzf-MSO. 

For an ^-Jzf-MSO-sentence i/a, where the predicates P<p are introduced via Jz? -formulas (p(xi , . . . ,x n ) 
with n free variables, we set 

L(V0 = {(«!,..., On) G (M'T | («!,...,«„) |= 1^} 

as the co-language defined by \jf. We say a relation /? C (M w ) n is Jt-J£-MSO definable if there is a 
^#-^f-MSO sentence y with L s = L(y). 

Later on, it will be convenient to refer to the component entries of an ft)-word (ai,...,a n ) in a 
more readable way than via an index i G {1, . . . ,n}. So, when a sequence variable Y is used for the i-th 
component a,-, we shall write Y(s) to indicate the element oc,-(j) for sGM. 

Analogous definitions can be given for the case of finite words over M". 

3 M-S^ -Biichi Automata 

In this section we introduce finite automata over words and G)-words whose letters are ra-tuples from 
M which is the domain of a (in general infinite) relational structure . Transitions of the automata 
are defined in a logic «Sf . Mentioning both parameters (the structure ^ and the logic Jzf), we speak 
of -automata and ^-Jz? -Biichi automata. In the first subsection we obtain, not surprisingly, an 

equivalence between ^#-^f-automata and ^-Jzf-MSO. In the second subsection we add some remarks 
on an extended model ("strong Biichi automata") that allows to capture the clone predicate between 
successive letters. 

3.1 The standard case 

Let ^# be a structure with domain M. An -Biichi automaton over n-tuples of M-elements is of the 

form 

&=(Q,M n ,q ,A,F) 

with a finite set Q of states, the input alphabet M", the initial state go G Q, the set F C Q of accepting 
states and the finite transition relation A C g x $„ x g, where <!>„ is the set of Jzf-formulas with n free 
variables. 

Let us define acceptance of co-words. If a = (oci , . . . , a n ) is an co-word over M", a run of SB on a is 
an infinite sequence of states p = p(0)p(l) . . . with p(0) = qo such that for every i > there exists an 
Jt-££ -formula (p{x\, ... ,x n ) and a transition (p(j),<p,p(j + 1)) satisfying 

\= (p[ai (?'),■•■, «„(/)] 
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A run p of 88 on a is successful if there exist infinitely many i such that p (/) € i 7 . We say that 88 accepts 
a if there exists a successful run of 88 on a. We denote by L{8§) the set of ft)-words over M" accepted 
by 88. 

Similarly, we define ^-.Sf-automata for the case of finite words (as done in 12). Languages accepted 
by these automata will be denoted as „#-Jzf -recognizable languages. We note some basic properties. 

Lemma 1 

• The class of ^-^-recognizable languages (of finite words) is closed under union, projection, and 
complementation. 

• For an ^-J£ -recognizable language (of finite words) U C (M n )* and an ^-Jzf-Buchi recogniz- 
able co-language K C (M n ) m , we have 

1. U w is ^-J^-Buchi recognizable. 

2. U K is ^Jt-J^-Buchi recognizable. 

Proof The closure properties of ^#-.i?-recognizable languages (of finite words) are shown by slight 
adaptions of the classical case (where the alphabet is finite). Here, we concentrate on pointing out the 
adaptions rather than the actual constructions. For example, an automaton for the projection from M" 
to M" _1 can easily be obtained by replacing the "label" (p{x\, . . . ,x n ) of a transition by 3x„(p(xi ,...,x n ). 
For the complementation, we follow the strategy of a determinization via a powerset construction and 
then simply swapping the sets F and Q\F (as outlined in iffl). The idea is as follows: Given an 
automaton 88 (on finite words), 88 does not necessarily provide a run (accepting or not accepting) for 
every possible input letter in M'\ i.e., there might be a letter that does not satisfy any of the formulas 
of the transitions. For the construction of the complement automaton, one modifies the set of formulas 
for the transitions such that each input word leads to a complete run, and additionally, one prepares 
for determinism: Let q>\ , . . . , (p m be the formulas which occur in the transitions of 88. For each subset 
/ C {1,... ,m}, introduce the formula yj := f\ ieJ A Ai£/ _,< Pi- Note that for J ^K, there is no symbol 
m G M n with \=yjA y/s-[»i], and for each m, there is a set J such that ^# |= y//[m]. Then we construct 
88' by replacing each transition (p, (p t ,q) G A by (/?,¥,-, #) with = V j 3 i Yj- Then L{88') = L{88), and 
one can continue with the usual powerset construction. 

Concerning the second part of the Lemma, for a given ^M-J£ -recognizable U C (M n )*, the construc- 
tion of an „#-Jzf-Buchi automaton recognizing U m can be done in a straightforward way by isolating 
the initial state such that it has no incoming transitions and for each transition from a state q to some 
state in F, adding a transition from q to the initial state over the same letter, where the initial state will 
be the only final state in the new automaton. For the concatenation U ■ K, we again follow a well-known 
idea by composing the two automata with additional transitions to cross over from one to the other at the 
appropriate positions. ■ 

The basic decidability result on ^#-«if-automata is the following. We state it for both kinds of 
automata: 

Proposition 2 If the J? '-theory of is decidable, then the nonemptiness problem for jfo '-Jzf ' -automata 
on finite words as well as for ^t-J£-Buchi automata is decidable. 

Proof For both kinds of ^-Jzf-automata, we have to determine whether there exists a word which is 
the label of a finite successful run. As a preparation, we have to check for each of the finitely many 
transitions (p, (p{x\,. . . ,x n ),q) G A whether it is "useful", i.e., whether there is an input letter m G M" 
satisfying (p. This is done by invoking decidability of the Jzf-fheory of jft, namely by checking whether 
^ \= 3xi ■ ■ ■ 3x n <p{x\,. . . ,x n ). Now one considers the directed graph (Q,R) where (p,q) G R if there is a 
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useful transition from p to q. For an Jzf-automaton over finite words, it remains to check whether in 
(Q,R) there is a path from q$ to T 7 ; for an ^-Jf-Biichi automaton one verifies whether in (Q,R) there 
is a path from qo to a strongly connected component containing a state from F. ■ 

We now show basic closure properties of ^t- Jzf-Biichi automata. 

Lemma 3 If the J£ -theory of ^ is decidable, the class of '-££ 7 -Buchi-recognizable (O-languages is 
effectively closed under union, projection, and complementation. 

Proof For union and projection the same construction as in Lemma[T]works. We sketch the construction 
for complementation, using the original approach of Biichi (3)- 

Let 38 = (Q,M n ,qo,A,F) be an -Biichi automaton. We introduce an equivalence relation over 

finite M" -words such that (M n ) a \L{3&) is representable as a finite union of sets U ■V co with .M-^£- 
recognizable sets U,V C (M n )*. By Lemma [T] this suffices to show Biichi recognizability of (M") ffl \ 

L{m). 

The desired equivalence relation is defined in terms of transition profiles. We write for a finite word 

u G (M n )* and p,q G g: 

• 38 : p A q if there is a run on u from p to q in 38, 

• 38 : p A q if there is a run on u from p to q in ^ that visits an accepting state from F. 

F 

A transition profile T = tp(u) is then given by two sets I tp (u), Jp(u) °f pairs of states, I tp (u) containing 
those pairs (p,q) where 38 : p A q, and J tp ( u ) containing those pairs (p,q) where 3§ : p A q. Two words 

m, v are called ^"-equivalent, written u ~ ^ v, if tp(w) = tp(v). This equivalence relation is of finite index: 
For this, note that each equivalence class (i.e., a language U z for a type X) is a Boolean combination of 
the ^-.Sf-recognizable languages C/ M = {w | 38 : A q}, U' pq = {u \ 38 : p q}, in fact, we have 

^= n n ^ n n n ^- 

(/>,?) e/ T (p,?)^/t (p,?)e/ T (p,?)^/t 

Since the set of pairs (p,q) is finite, we get only finitely many equivalence classes. Moreover, by 
Lemma[T]and Proposition [2j we can compute those U t which are nonempty and hence obtain an effective 
presentation of the equivalence classes in terms of the corresponding finite sets I x , J x . 

We identify the equivalence classes with the transition profiles and denote the set of these transition 
profiles of 38 by 77V 

The following "saturation property" is now immediate: 

Lemma 4 For any ~ ^-equivalence classes U,V, the co-language U ■ V m is either contained in L{38) or 
in its complement. 

It remains to show that any w-word over M" belongs to some set U ■ V a where U,V are ^ ^-classes. 
For this we use the transition profiles as "colors" of segments Gt[i,j] for i,j € N. By Ramsey's Infinity 
Lemma ifTTl there is for any a and any Biichi automaton 38 a pair of transition profiles To, T from TPgg 
and an infinite set I = {jo < i\ < i% < . . .} such that 

tp(a[0,i ~ 1]) = T , tp(a[ij,i j+1 - 1]) = x for j > 0. 

This shows that a G t/ To • U®, where U Xq , U t denote the equivalence classes of corresponding to To 
resp. T. Let 

NTPag = {(t„, t) G TP% I U Zo ■ Ufr\L{3§) = 0} 



A. Spelten, W. Thomas & S. Winter 



27 



Again, by decidability of the Jzf-theory of this set is computable. Then 



(M") m \L(^) 



U v*P?- 



(zo,z)eNTP 



As a consequence of Lemma[T]and Lemma[3]we obtain the following result. 

Proposition 5 If the J£ -theory of ^ is decidcible, the inclusion problem and the equivalence problem 
for .M-3£-Biichi recognizable languages are decidable. 

After these preparations, one can easily infer an equivalence between ^-Jzf-Biichi automata and 
^-if-MSO. 

Remark 6 Let 38 be an ^-Jz?-Biichi automaton, then there exists an ^#-Jz?-MSO sentence \j/ with 

Again, the construction of an ^#-^f-MSO formula describing a successful run of a given .M-3£- 
Biichi automaton 38 is a straightforward adaption of the well-known proof ( fTTl ). The only modification 
occurs in the formulas describing the transitions of 38: for a transition (p,(p,q), one uses the predicates 
P<p(x) as introduced above in the definition of ^-Jzf-MSO. 

Let us turn to the translation from ^#-Jzf-MSO sentences to ^-Jzf-Biichi automata. 

Proposition 7 Let y be an ^-3£-MSO sentence, then there exists an jfa ' -Buchi-automaton 38 with 



Proof We first modify M -Jz^-MSO to the expressively equivalent formalism of J<(-££ -MSOo-formulas 
in complete analogy to the definition of chaino logic in Section [2] We proceed by induction over MSOo- 
formulas. 

For the induction basis, we consider the atomic formulas Xj C Xj, Sing(X,-), Succ(X,,Xy), Xj < Xj, 
and Xj C Py and specify ^#-^f-Biichi automata that recognize the sets of co-words defined by these 
formulas. To exemplify, we give the automaton for Xj C Py, which checks that when the i-th component 
is 1, the letter vector satisfies the ^#-«Sf -formula cp, which defines the letter predicate P^. 



For the induction step, we consider the connectives V and as well as the existential quantifier 3. 
Here, we can exploit the closure properties of ^#-«5f-Biichi automata from Lemma and employ the 



As a relation R C (M m ) n is representable by a convolution as an co-word over M n , Remark [6] and 
Proposition [7] yield the following result. 

Theorem 8 A relation R C (M m )" with n>l of (O-words is J?-J£-MSO definable iff it is JZ-J^-Biichi- 
recognizable. The transformation in both directions is effective. 

As a consequence of the j& -Jzf-Btichi theory, we obtain that satisfiability and equivalence of -Jzf - 
MSO-formulas over models from M® are decidable if the Jzf -theory of the structure ^ is decidable. 



L(y)=L(38). 




constructions for the union, complementation, and projection, respectively. 
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3.2 Strong -Biichi automata 

In the second part of this section, we extend - as far as possible - the techniques and results to a slightly 
stronger model of Biichi automaton. While the Biichi automata above are appropriate for treating the 
structures a stronger model is motivated by the study of strong tree iterations in which the 
clone predicate enters. Recall that it allows to single out those elements of M* which are of the form 
u mm. Thus, when reading a "letter" m along a path, we need to incorporate the feature to "remember" 
whether this current input letter m coincides with the previous one. 

We define the notion of strong ^f-J^-Buchi automaton over rc-tuple input letters (i.e., with input 
alphabet M n , M being the domain of The format is the same as for standard Biichi automata over 
M" as mentioned above, except for the transitions. For each state pair (p,q) the possible transitions 
are defined by a formula (p pq {x\,. ..,x„,yi,... ,y n ) - or, in the special case of an initial transition, by a 
formula <p qo q(x\ ,...x n ). Starting with the latter case, the automaton can proceed from q to q with input 
letter (m i , . . . , m n ) if j$ \=(p[m\,...,m n ]. For a transition of the first case, in which a previous input letter 
exists and is {ni[,. . . ,m~), the automaton can move from p to q if ^# |= (p[m\, . . . ,m n ,m^,. . . ,m~]. All 
other notions are copied from the case of (standard) ^M-££ -Biichi automata. 

We can reprove the basic decidability and closure properties only under rather radical restrictions, 
namely just for the logic Jz? = MSO and for the case of input letters from M (rather than ^-tuples of such 
letters). We only give a rough outline; in the present paper we do not apply these automata to chain logic 
over tree structures. 

First let us state the basic decidability result. 

Lemma 9 If the MSO-theory of ^# is decidable, the emptiness problem for strong ^-MSO-Bilchi au- 
tomata over M is decidable. 

Proof The proof of this lemma can either be given directly, or by invoking the above-mentioned Muchnik- 
Walukiewicz result ( lfl2l[T9ll ). It states - under the assumption that the MSO-theory of ^ is decidable - 
that the MSO-theory of is decidable. The nonemptiness of a strong Biichi automaton over M can be 
decided by checking existence of a suitable path through ■ 

Lemma 10 If the MSO-theory of ^# is decidable, the class of co-languages recognized by strong jM- 
MSO-Buchi automata over M is effectively closed under the Boolean operations and definable projec- 
tions p:M^>-M. 

Proof This claim is shown in precise analogy to the case of standard ^#-«5f -Biichi automata (and we 
skip here the repetition of proofs), except for the closure under complement. Here we describe the 
necessary modifications. 

The approach is the same as for the standard case, i.e., via Biichi's original method involving finite 
colorings and Ramsey's Theorem. However, the coloring of a segment of an ft)- word over the alphabet 
M", i.e., the transition profile, is defined differently. Given a strong Biichi automaton s/, the "strong 
transition profile" of the segment tt[i,j] of an ft)-word a refers also to the last previous letter a(i — 
1) if i > 0. This extra context information is needed in order to capture the clone predicate on the n 
components of a, and we define the transition profile of a segment relative to this context information 
within a. So an appropriate notation for a strong transition profile is tp a ([i,j]) rather than tp{u). Such 
profiles, however, are of the same type as the previously defined profiles (namely, presented as two sets 
of pairs of states). The transition profile of a segment tt[i,j] is fixed from the state pairs (p,q) that allow 
a run of the automaton from p to q (respectively, a run from p to q via a final state), where in the first 
move the letter a(i — 1) is used. (This condition is dropped for the case i = 0.) 
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There is, of course, a definite conceptual difference to the usual coloring of segments in terms of 
standard transition profiles: There, one may concatenate any sequence of segments (for given transition 
profiles) to obtain a new composed segment whose transition profile is induced by the given ones. In 
the new setting, the composition of segments u and v only works when the clone information on the 
last letter of u agrees with the first letter of v. However, this does not affect the argument in Biichi's 
complementation proof: Here we only need that for any given a one can obtain a sequence / < h < ■ ■ ■ 
such that all segments a[ij,ij + \ — 1] share the same transition profile, and that for such a sequence, 
the transition profiles of ce[0,/o — 1] and of a[io,h — 1] determine a either to be accepted of not to be 
accepted by the Biichi automaton. 

Also the sets £/ To • U® can be used as before when defined properly: Such a set is not obtained by 
freely concatenating a segment u G U Xq and a sequence of segments from U T ; rather, it is the set 

u % -U? = {a\ 3i ,h , ■ ■ • (0 < k < h < ■ ■ ■ A tp a [0, i - 1] = To A t Pa - 1] = x for j = 0, 1 , . . .)} 

The effective presentation of the complement of L(srf) is now completed as in the preceding subsection 
for ^#-«Sf -Biichi automata. ■ 

In Section [5] below we shall see that these results fail for the case of an infinite alphabet M n with 
infinite M and n > 1. 



4 Weak Tree Iterations 

In this section, we want to show that for the weak tree iteration with equal level relation, the chain theory 
with if on siblings is decidable if the if-fheory of is. 

With the preparations of Section we will establish a reduction from chain logic formulas over tree 
models to ^#-Jzf-MSO over co-sequences (and then to Biichi automata). 

To avoid heavy notation, we employ chaino logic as introduced in Section 13 and provide the follow- 
ing construction. Recall that for a chain c in , the object c is a pair of sequences over M coding the 
path underlying the chain c, respectively the membership of nodes of this path in c. 

Lemma 11 For any chains-formula (p(X\, . . . ,X n ) over JZ* = (M*,S, <,R* V . . . ,R* k ,E) with if on sib- 
lings, one can construct an jtfl '-MSO- formula (p'(Y\ ,Z\,. . .,Y n ,Z n ) interpreted in co-words over M 2 " 
such that for all chains c\, . . . ,c n we have: 

\= <p[ci,...,c„] 
if and only if{c\,. . . ,c n ) \= (p'(J\,Z\,. . . 

Proof We proceed by induction over the structure of chaino -formulas with if on siblings over jtf^. 

For the induction basis we have to consider the atomic formulas, namely of the form Sing(X), X; C 
Xj, Xi X Xj, R f (Zi, . . . ,X k ), E(X h Xj), and also the if -formulas y(x h ,x if ). 

As a first example, we present the translation into ^#-if-MSO-formulas for the formula (p(X) = 
Sing(X): Given the encoding c = (a, j8) of a chain c, the formula <PsingP0 nas to ex P ress that j8 indicates 
membership in c exactly once. Thus, we obtain <Psin g (^^) = 3j(Z(j) A V?(? ^ s — > -<Z(s))^ . 

For the case of an if -formula y(xi 1 , . . . ,Xi e ), we capture Xi i: ...,Xi t by corresponding singletons 
Xj { ,X[ t , and these in turn by pairs (Y^ ,Z ; -j), . . . , (^,Z/J consisting of a path Yj j G M w and a singleton 
set indicator Z,-. C {0, l} ffl each. We have to define a corresponding predicate P y C ((M x {0, \}) n ) m by 



30 



Trees over Infinite Structures 



an ,^-Jzf-MSO-formula that expresses in terms of the Yj., Zj. that there is a common S-predecessor z of 
the elements x ; -. and that the tuple x ; -, , . . . ,x, f satisfies 7. In intuitive notation, we have 

1 1 
(p'p r (Yi,Zi,. . . ,Y n ,Z n ) = /\ "(Yi^Zij) is singleton containing x,-." A 3z /\ "5(z,x ; -.)" A y(x,-, , . . . ,x k ) 
;'=i 7=1 

In some more detail: 

A "Psing ( Y ij> z ij ) A 3x ; -! . . . 3x,- ( 3s (Zij (s) A F,- ; (j) = Xij A /\ Vf < 5 ) = (0 ) A 7( x ii , • • • , ) ) 

The induction step then is straightforward, as ^-Jzf-MSO is closed under the Boolean operations 
and projection. ■ 

Thus, we obtain a reduction of the chaino-theory with J£ on siblings of to the ^#-Jz?-MSO theory, 

which with Theorem [8] is decidable if the -theory of ^# is decidable. This leaves us to conclude this 
section with the following theorem: 

Theorem 12 If the ^£ -theory of ^ is decidable, the chain-theory of with Jzf on siblings is decid- 
able. 



5 Undecidability Results 

In the previous sections we showed decidability of the model-checking problem for chain logic with J2? 
on siblings over tree structures given a structure ^# with decidable Jzf-theory for some logic J£ . 

The first result of this section shows that this does not extend to strong tree iterations (even if 
we confine ourselves to first-order logic in place of chain logic). 

The second result shows another limitation to decidability: In the "horizontal dimension" of tree 
models, we may (in Theorem [T2l) use J2? -quantifiers ranging over children of given nodes. We show that 
for the case _£? = MSO we lose decidability when the horizontal quantification is extended to an entire 
tree level. Here we get undecidability for the weak tree iteration. 

For the first result we use a reduction from the termination problem of 2-counter machines (or 2- 
register machines). Such a machine M is given by a finite sequence 

1 instri; . . . ;k — 1 instrfc 1 ; ^ stop 

where each instruction instr y is of the form 

• Inc(Xi), Inc(X2) (increment the value of X\, respectively X2 by 1), or 

• Dec(Xi), Dec(X2) (similarly for decrement by 1, with the convention that a decrement of is 0), 
or 

• If Xj = goto £\ else to £2 (where i = 1,2 and 1 < £\ ,£2 < k, with the natural interpretation). 

An M-configuration is a triple (£,m,n), indicating that the ^-th instruction is to be executed and the 
values of Xi,X2 are m,n, respectively. A terminating M-computation (for M as above) is a sequence 
(£o,mo,no), . . . ,(£ r ,m n n r ) of M-conngurations where in each step the update is done according to the 
instructions in M and the last instruction is the stop-instruction (formally: £ r = k). The termination 
problem for 2-counter machines asks to decide, for any given 2-counter machine M, whether there exists 
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a terminating M-computation that starts with (1,0,0) (abbreviated as M : (1,0,0) —> stop). It is well- 
known that the termination problem for 2-counter machines is undecidable ([7]). 

We turn to the model-checking problem over structures jM^. We show undecidability when is 
the structure 5? := (N,Suc) (where Sue is successor). 

Theorem 13 The first-order theory of with FO on siblings is undecidable. 

Proof For any 2-register machine M we construct a first-order formula (pM with FO on siblings such that 
M : (1,0,0) -> stop iff \= <p M . 

The idea is to code a computation (£q , mo , no ) , . . . , (£ r , m r , n r ) by three finite paths of same length, one 
for each of the three components. Each of these paths (namely Tt$ = (£q, . . . ,t r ),K\ = (mo, . . . ,m r ),7l2 = 
(no, ■ ■ ■ ,n r )) is determined by its last point in the tree structure i.e., by a triple xq, X\, X2 of =5^- 
elements. 

We use a formula which expresses 

3xo3x\3x2(E(xo,X\) f\E(x\,X2) A [xq,x\,X2 code a terminating computation of M]). 

In order to obtain a formalization of the condition in squared brackets, we have to express 

1. the initial condition that no starts with the son 1 of the root and K\ , %2 with the son of the root, 

2. the progress condition that for each yo -< Xo (giving an instruction number), the corresponding M- 
instruction is executed, which involves the vertex yo and the vertices y\ -< Jti,y2 ~< X2 on the same 
level as yo and their respective successors zo,Z\ ,Z2 on 7To, %\ , X2, respectively, 

3. the termination condition that xq is the number k. 

Accordingly, we can formalize the condition in squared brackets by a conjunction of three formulas 
<Pi> <P2, (f>3 in the free variables xq, xi, X2, making use of the (definable) tree successor relation S. 

• The formula <pi expresses (in first-order logic with FO on siblings) for the root r of the tree model 
and those three 5-successors yo, y\, y2, where yo ^^o.Ji ~^x\,yi ^*2>thatyo is the number 1 and 
yi, y2 are the number (of the model 5? = (N,Suc)). 

• The formula (fe is of the form: 

"for all yo -< xo, yi -<x\,y2< with E(yo,y\) and E(yo,y2), there are tree-successors 
Zo, Zi, Z2 (i-e., with S(y Q ,z,o), 5(yi,zi), S(y 2 ,Z2) with zo < x , Z\ < X\, Z2 ^ x 2 ) that 
represent the con - ect update of the configuration (yo,yi>y2)-" 

The condition on update is expressed by a disjunction over all program instructions; we present, 
as an example, the disjunction member for the statement "3 Incp^)": 

yo is number 3 in (N,Suc) — > zq is number 4 in (N,Suc) 

Azi is the clone of y\ AZ2 is the 5«c-successor of the clone of y2- 

It is easy to formalize this in first-order logic with FO on siblings, similarly for the Dec-instructions 
and the jump instructions. 

• The formula 93 expresses the third condition and is clearly formalizable in first-order logic with 
FO on siblings. ■ 
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Figure 1: Coding an element of a set S by an element of an antichain A. 



This result can also be stated in the framework of strong Biichi automata (or even strong automata 
on finite words) when the alphabet consists of pairs of natural numbers: With each 2-register machine M 
one associates a strong ^-MSO-automaton s4m over N 2 which accepts an input word (mo, no) • • • (m r ,n r ) 
if this represents the sequence of register values of a terminating computation of M; the existence of an 
appropriate sequence of instruction numbers (from {1, . . . , k}) can be expressed by a block 3Xi . . . 3X^ of 
MSO-quantifiers. (In fact, weak MSO-quantifiers suffice.) 

Let us turn to the second undecidability result. We shall confine ourselves to the simplest setting, 
where the structure ^# is just ({0, 1},{0},{1}), i.e., and are both the binary tree with equal 
level relation (see also [ 18"]). 

Theorem 14 The chain theory of the binary tree with equal level relation and MSO on tree levels is 
undecidable. 

Proof We use an idea of ||9l that allows to code a tuple of finite sets of the binary tree up to (and 
excluding) level L by a tuple of subsets of level L itself. In other words, we code a subset S of tree nodes 
before level L by an "antichain" A which is a subset of the level L (see Figure [T]). 

We simply map a vertex v (before level L) to the unique vertex V G L which belongs to vlO* (i.e., 
belongs to the leftmost path from the right successor of v; see again Figured)). The map v h-> v' is injective 
and definable in chain logic (even in FO-logic), given the level L. Moreover, it is easy to see that the 
relations of being left or right successor in the tree are translated to FO-definable relations over the level 
L under consideration. 

Using this coding, an existential quantifier over finite sets in the binary tree is captured by an ex- 
istential quantifier over subsets of an appropriate level of the tree (namely, of a level that is beyond all 
maximal elements of the finite set under consideration). 

Thus, the weak MSO-theory of the binary tree with E is interpretable in the FO-theory of the binary 
tree ({0,l}*,5 ,5i,^,£) withE'and with MSO restricted to levels. 

Since the weak MSO-theory of the binary tree with E is undecidable (see e.g. lfI31 ). we obtain the 
claim. ■ 

6 Conclusion 

In this work, we outlined a theory of generalized Biichi automata over infinite alphabets. These alphabets 
are represented by relational structures the transitions being specified by formulas of a logic Jz? 
over jtft. In this setting of j$-5£ -Biichi automata (which only slightly generalizes that of HI), the 
nonemptiness problem becomes decidable if the Jzf-fheory of is. An extended model of strong 
Jzf -Biichi automata was introduced in which a transition via an ^#-input may depend on the previous ^# 



A. Spelten, W. Thomas & S. Winter 



33 



input. Here an essential difference appears between the cases where input letters are from M and where 
input letters are in M n for n > 1 . 

We applied this theory to show that the chain logic theory of the weak tree iteration of ^# (with 
Jz? chosen as above) is decidable where the equal level relation is adjoined, and quantifications of Jzf 
over siblings of the tree model are allowed. On the other hand, we showed limits for generalization. For 
example, we showed undecidability for the corresponding theory of the strong tree iteration when the 
underlying model is the successor structure of the natural numbers. 

Several problems are raised by this study. Since the logics considered here all have nonelementary 
complexity, it may be interesting to set up fragments and "dialects" (e.g. in temporal logics) of chain logic 
where the complexity is better. Also, it seems that variants of the model of strong (Biichi-) automaton 
should be studied in more depth, for instance by an integration with the theory of automata over "data 
words" as developed in EJHHU. 
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